Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories

Tools

AllAndroid SecurityAuthentication & AuthorizationCloud Infrastructure SecurityDefensive ToolsDisk ForensicsEmbedded Systems SecurityGeneral Purpose UtilitiesIndicator of Compromise (IOC) ManagementOSINT (Open Source Intelligence)Packet Sniffing & AnalysisPassword CrackingPenetration Testing FrameworksPhishing ToolsPrivilege EscalationReconnaissanceStatic AnalysisVulnerability ScannersWeb Vulnerability ScannersWi-Fi AuditingBluetooth SecurityContainer SecurityDynamic Analysis (Sandboxing)Encryption/Decryption ToolsExploit FrameworksIdentity ManagementiOS SecurityIoT SecurityMemory ForensicsNetwork MappingOSINT for Social EngineeringPassword AttacksPayload GenerationPersistence MechanismsPort ScanningStatic Code Analysis (SAST)Threat Feeds & AggregatorsVulnerability AnalysisWeb Proxies & InterceptionCode AnalysisDNS & Subdomain EnumerationDynamic Code Analysis (DAST)ExploitationHash AnalysisIDS/IPS EvasionImpersonation ToolsLateral MovementMobile App PentestingNetwork ForensicsReverse EngineeringRFID/NFC ToolsSCADA/ICS SecurityScripting & AutomationServerless SecurityShellcodeWeb Application ExploitationAPI Security TestingConfiguration AuditingData ExfiltrationDebuggersForensicsInformation GatheringMobile ForensicsNetwork Access ControlPost-ExploitationSecurity VirtualizationPhishingWAF BypassWeb SecurityFuzzingNetwork SecuritySteganographyWireless SecurityData RecoveryMalware AnalysisDigital ForensicsHardware HackingCryptographyCTFPenetration TestingCloud SecurityDevSecOpsMobile SecurityPrivacyCommand and ControlSocial EngineeringHardware SecurityUtilities & FrameworksHardware & IoT SecuritySecret DetectionBinary AnalysisThreat IntelligenceIdentity & Access Management (IAM)Supply Chain SecurityAuthenticationMachine LearningIntrusion DetectionPapers & ResearchMisconfigurationSubdomain EnumerationEmail HarvestingLearning & EducationAI-Assisted ReversingDNS FuzzingRed TeamingIncident ResponseCrawlerCurated ResourcesRemote Access ToolShellcode GenerationPayload DevelopmentRemote Access TrojanAPI SecurityAnti-BotFingerprint SpoofingCAPTCHA BypassEmail SecurityDNS AnalysisChaos EngineeringLearning Paths & CoursesContainer EscapeAI SecurityDatabase SecurityFirmware AnalysisAnomaly DetectionLog AnalysisAdversarial AttackBinary ExploitationLabs & Practice
NewestRelevanceMost popularRecently updated
258 results
SkyRAT preview

SkyRAT

GitHubyschgroup/skyrat

SkyRAT - Powershell Remote Administration Tool

command-and-controldata-exfiltrationlateral-movement+5
34
8 years ago
RedLogin preview

RedLogin

GitHubparsingteam/redlogin

Red Login: SSH Brute-force Tools

password-attackspenetration-testing
1058 years ago
mapchar preview

mapchar

GitHubpwnfo/mapchar

Generate wordlists using pattern logic and expressions.

password-attackspassword-crackingpayload-generation+2
232 months ago
Arkhota preview

Arkhota

GitHubalw1ez/arkhota

Arkhota, a web brute forcer for Android.

android-securitypassword-attackspenetration-testing+1
203 years ago
Klyda preview

Klyda

GitHubhcbaker/klyda

Highly configurable script for dictionary/spray attacks against online web applications.

information-gatheringpassword-attackspenetration-testing+1
513 years ago
LaZagne preview

LaZagne

GitHubalessandroz/lazagne

Cross-platform credential recovery tool that extracts stored passwords from browsers, email clients, databases, system mechanisms, and network…

encryption-decryption-toolsforensicshash-analysis+8
11.0k11 months ago
ResetNightmare preview

ResetNightmare

GitHubsemperis-community/resetnightmare

POC tool for ResetNightmare (CVE-2026-27912)

authentication-authorizationexploitationpassword-attacks+3
20813 days ago
SCOMDecrypt preview

SCOMDecrypt

GitHubnccgroup/scomdecrypt

SCOMDecrypt is a tool to decrypt stored RunAs credentials from SCOM servers

encryption-decryption-toolspassword-attackspenetration-testing+2
1302 years ago
mcafee-sitelist-pwd-decryption preview

mcafee-sitelist-pwd-decryption

GitHubfunoverip/mcafee-sitelist-pwd-decryption

Password decryption tool for the McAfee SiteList.xml file

encryption-decryption-toolsmisconfigurationpassword-attacks+1
1722 years ago
createdump preview

createdump

GitHubrweijnen/createdump

Leverage WindowsApp createdump tool to obtain an lsass dump

impersonation-toolspassword-attackspost-exploitation+1
1491 year ago
PDFCrack preview

PDFCrack

GitHubusethisname1419/pdfcrack

PDF Crack is a GUI tool used for cracking pdf passwords. includes 3 cracking options

encryption-decryption-toolspassword-attackspassword-cracking+1
714 days ago
Instagram-Brute-Force-2024 preview

Instagram-Brute-Force-2024

GitHub0x0mastermind0x0/instagram-brute-force-2024

Automated Instagram credential brute-forcing tool with CPU/GPU support, designed for password guessing attacks against target accounts using Chrome…

osint-social-engineeringpassword-attackssocial-engineering
81 year ago
nounours preview

nounours

GitHubsynacktiv/nounours

Nounours is a tool designed to test APP_KEYs at scale on Laravel applications.

cryptographyencryption-decryption-toolspassword-attacks+3
12 months ago
CVE-2023-2437 preview

CVE-2023-2437

GitHubrxrcoder/cve-2023-2437

Exploit tool for CVE-2023-2437 targeting UserPro <= 5.1.1 authentication bypass, allowing attackers to gain admin access and create new…

authentication-authorizationexploitationpassword-attacks+3
2 years ago
unshackle preview
Archived

unshackle

GitHubfadi002/unshackle

Open-source tool to bypass windows and linux passwords from bootable usb

authentication-authorizationeducationpassword-attacks+3
2.0k2 years ago
pth-toolkit preview
Archived

pth-toolkit

GitHubbyt3bl33d3r/pth-toolkit

Modified version of the passing-the-hash tool collection made to work straight out of the box

lateral-movementpassword-attackspenetration-testing+2
61611 years ago
mimikatz preview

mimikatz

GitHubgentilkiwi/mimikatz

A little tool to play with Windows security

authenticationexploitationexploit-frameworks+10
21.8k4 months ago
fscan preview

fscan

GitHubshadow1ng/fscan

一款内网综合扫描工具,方便一键自动化、全方位漏扫扫描。(An intranet comprehensive scanning tool, enabling one-click automated, all-round vulnerability scanning)

educationexploitationlateral-movement+9
14.5k8 days ago
Previous12…15Next